fa-mcp-sdk 0.4.74 → 0.4.77

package/cli-template/README.md

@@ -1,191 +1,193 @@
-# {{project.productName}}
-
-{{project.description}}
-
-## Install & Run
-
-### Quick Start
-```bash
-# Install
-npm install
-
-# Configure (copy config/local.yaml from config/_local.yaml)
-# Add database credentials
-
-# Build
-npm run build
-
-# Run (STDIO mode for Claude Desktop)
-npm start
-```
-
-### Test Run
-```bash
-# Unit tests
-npm test
-
-# MCP protocol tests
-npm run test:mcp        # STDIO mode
-npm run test:mcp-http   # HTTP mode
-npm run test:mcp-simple # Simple test
-```
-
-### Dual Transport System
-
-**STDIO Mode** (default for Claude Desktop):
-- Direct stdin/stdout communication
-- Optimal for Claude Desktop integration
-- No network ports required
-
-**HTTP Mode** (web integration):
-- HTTP server with Server-Sent Events (SSE)
-- Home page with server status at `http://localhost:{{port}}/`
-- Health check endpoint at `/health`
-- Direct JSON-RPC 2.0 endpoint at `/mcp`
-
-
-## Features
-
-
-
-## MCP Tools
-
-
-
-## MCP Prompts
-
-### `agent_brief`
-Brief description of agent capabilities for agent selection.
-
-### `agent_prompt`
-Complete prompt with instructions.
-
-## MCP Resources
-
-### `staff://agent/brief`
-Same as `agent_brief` prompt. **MIME:** text/plain
-
-### `staff://agent/prompt`
-Same as `agent_prompt` prompt. **MIME:** text/plain
-
-
-## 2. Configuration
-
-**Option A: Configuration File**
-
-**Option B: Environment Variables**
-
-
-## Usage with AI CLIs
-
-The server exposes an HTTP MCP endpoint at `http[s]://<host[:port]>/mcp`. Authentication (when enabled in
-`config/default.yaml` → `webServer.auth`) is passed via the standard `Authorization` header — most commonly a
-JWT Bearer token generated by the `/gen-jwt` skill or by `node scripts/generate-jwt.js`.
-
-### With Claude Code
-
-Add to `~\.claude.json`:
-
-```json
-{
-  "mcpServers": {
-    "{{project.name}}": {
-      "type": "http",
-      "url": "http[s]://<host[:port]>/mcp",
-      "headers": {
-        "Authorization": "Bearer <jwt-token>"
-      }
-    }
-  }
-}
-```
-
-### With Claude Desktop
-
-Add to your Claude Desktop configuration (`claude_desktop_config.json`):
-
-```json
-{
-  "mcpServers": {
-    "{{project.name}}": {
-      "command": "npx",
-      "args": [
-        "-y",
-        "mcp-remote@latest",
-        "http[s]://<host[:port]>/mcp",
-        "--header",
-        "Authorization: Bearer <jwt-token>",
-        "--allow-http",
-        "--transport",
-        "http-only"
-      ]
-    }
-  }
-}
-```
-
-### With Qwen Code
-
-Add to `~\.qwen\settings.json`:
-
-```json
-{
-  "mcpServers": {
-    "{{project.name}}": {
-      "command": "npx",
-      "args": [
-        "-y",
-        "mcp-remote@latest",
-        "http[s]://<host[:port]>/mcp",
-        "--header",
-        "Authorization: Bearer <jwt-token>",
-        "--allow-http",
-        "--transport",
-        "http-only"
-      ]
-    }
-  }
-}
-```
-
-> For STDIO transport (local Claude Desktop integration without an HTTP server), run
-> `node <path-to-project>/dist/src/start.js stdio` — see `CLAUDE.md` for details.
-
-## HTTP Mode Endpoints
-
-- **/** - Home page
-- **/health** - Health check
-- **/sse** - Server-Sent Events
-- **/mcp** - JSON-RPC 2.0
-
-## Claude Code Skills
-
-The project ships with custom skills in `.claude/skills/`:
-
-| Command              | Description                                                             |
-|----------------------|-------------------------------------------------------------------------|
-| `/gen-jwt`           | Generate JWT tokens for MCP server authentication                       |
-| `/upgrade-guide`     | Generate migration guide for `fa-mcp-sdk` upgrades                      |
-| `/feature-prompt-generator` | Turn a feature description into a self-sufficient prompt for an AI CLI  |
-| `/readme-generator`  | Generate structured README.md + satellite `readme-docs/*.md`            |
-
-Details, launch modes, and examples: [SKILLS](readme-docs/SKILLS.md)
-
-## Security
-
-### Admin panel JWT requirement
-
-When `adminPanel.authType` includes `jwtToken`, the admin panel (`/admin`) accepts a JWT
-**only if its payload contains `allow: 'gen-token'`**. JWTs without this claim are
-rejected with `401` — this blocks short-lived tokens issued for other purposes (for
-example, the 5-minute JWT auto-generated by the Agent Tester page and written into its
-`Authorization` header) from being replayed to mint arbitrary long-lived tokens.
-
-`permanentServerTokens` and `basic` admin auth are unaffected by this check.
-
-Generate an admin-capable JWT:
-
-```bash
-node scripts/generate-jwt.js -u admin -ttl 30d -p "allow=gen-token"
-```
-
+# {{project.productName}}
+
+{{project.description}}
+
+## Install & Run
+
+### Quick Start
+```bash
+# Install
+npm install
+
+# Configure (copy config/local.yaml from config/_local.yaml)
+# Add database credentials
+
+# Build
+npm run build
+
+# Run (STDIO mode for Claude Desktop)
+npm start
+```
+
+### Test Run
+```bash
+# Unit tests
+npm test
+
+# MCP protocol tests
+npm run test:mcp        # STDIO mode
+npm run test:mcp-http   # HTTP mode
+npm run test:mcp-simple # Simple test
+```
+
+### Dual Transport System
+
+**STDIO Mode** (default for Claude Desktop):
+- Direct stdin/stdout communication
+- Optimal for Claude Desktop integration
+- No network ports required
+
+**HTTP Mode** (web integration):
+- HTTP server with Server-Sent Events (SSE)
+- Home page with server status at `http://localhost:{{port}}/`
+- Health check endpoint at `/health`
+- Direct JSON-RPC 2.0 endpoint at `/mcp`
+
+
+## Features
+
+
+
+## MCP Tools
+
+
+
+## MCP Prompts
+
+### `agent_brief`
+Brief description of agent capabilities for agent selection.
+
+### `agent_prompt`
+Complete prompt with instructions.
+
+## MCP Resources
+
+### `staff://agent/brief`
+Same as `agent_brief` prompt. **MIME:** text/plain
+
+### `staff://agent/prompt`
+Same as `agent_prompt` prompt. **MIME:** text/plain
+
+
+## 2. Configuration
+
+**Option A: Configuration File**
+
+**Option B: Environment Variables**
+
+
+## Usage with AI CLIs
+
+The server exposes an HTTP MCP endpoint at `http[s]://<host[:port]>/mcp`. Authentication (when enabled in
+`config/default.yaml` → `webServer.auth`) is passed via the standard `Authorization` header — most commonly a
+JWT Bearer token generated by the `/gen-jwt` skill or by `node scripts/generate-jwt.js`.
+
+### With Claude Code
+
+Add to `~\.claude.json`:
+
+```json
+{
+  "mcpServers": {
+    "{{project.name}}": {
+      "type": "http",
+      "url": "http[s]://<host[:port]>/mcp",
+      "headers": {
+        "Authorization": "Bearer <jwt-token>"
+      }
+    }
+  }
+}
+```
+
+### With Claude Desktop
+
+Add to your Claude Desktop configuration (`claude_desktop_config.json`):
+
+```json
+{
+  "mcpServers": {
+    "{{project.name}}": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "mcp-remote@latest",
+        "http[s]://<host[:port]>/mcp",
+        "--header",
+        "Authorization: Bearer <jwt-token>",
+        "--allow-http",
+        "--transport",
+        "http-only"
+      ]
+    }
+  }
+}
+```
+
+### With Qwen Code
+
+Add to `~\.qwen\settings.json`:
+
+```json
+{
+  "mcpServers": {
+    "{{project.name}}": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "mcp-remote@latest",
+        "http[s]://<host[:port]>/mcp",
+        "--header",
+        "Authorization: Bearer <jwt-token>",
+        "--allow-http",
+        "--transport",
+        "http-only"
+      ]
+    }
+  }
+}
+```
+
+> For STDIO transport (local Claude Desktop integration without an HTTP server), run
+> `node <path-to-project>/dist/src/start.js stdio` — see `CLAUDE.md` for details.
+
+## HTTP Mode Endpoints
+
+- **/** - Home page
+- **/health** - Health check
+- **/sse** - Server-Sent Events
+- **/mcp** - JSON-RPC 2.0
+
+## Claude Code Skills
+
+The project ships with custom skills in `.claude/skills/`:
+
+| Command                     | Description                                                                  |
+|-----------------------------|------------------------------------------------------------------------------|
+| `/gen-jwt`                  | Generate JWT tokens for MCP server authentication                            |
+| `/upgrade-guide`            | Generate migration guide for `fa-mcp-sdk` upgrades                           |
+| `/feature-prompt-generator` | Turn a feature description into a self-sufficient prompt for an AI CLI       |
+| `/readme-generator`         | Generate structured README.md + satellite `readme-docs/*.md`                 |
+| `/mcp-app-create`           | Scaffold a new MCP App (interactive UI: tool + HTML resource via ext-apps)   |
+| `/mcp-app-add-to-server`    | Enrich existing MCP server tools with interactive UIs (MCP Apps SDK)         |
+
+Details, launch modes, and examples: [SKILLS](readme-docs/SKILLS.md)
+
+## Security
+
+### Admin panel JWT requirement
+
+When `adminPanel.authType` includes `jwtToken`, the admin panel (`/admin`) accepts a JWT
+**only if its payload contains `allow: 'gen-token'`**. JWTs without this claim are
+rejected with `401` — this blocks short-lived tokens issued for other purposes (for
+example, the 5-minute JWT auto-generated by the Agent Tester page and written into its
+`Authorization` header) from being replayed to mint arbitrary long-lived tokens.
+
+`permanentServerTokens` and `basic` admin auth are unaffected by this check.
+
+Generate an admin-capable JWT:
+
+```bash
+node scripts/generate-jwt.js -u admin -ttl 30d -p "allow=gen-token"
+```
+

package/cli-template/jest.config.js

@@ -1,30 +1,27 @@
-export default {
-  preset: 'ts-jest',
-  testEnvironment: 'node',
-  testMatch: ['**/tests/**/*.test.ts', '**/tests/**/*.spec.ts'],
-  collectCoverageFrom: [
-    'src/**/*.ts',
-    '!src/**/*.d.ts',
-    '!src/index.ts'
-  ],
-  coverageDirectory: 'coverage',
-  coverageReporters: ['text', 'lcov'],
-  verbose: false,
-  silent: true,
-  reporters: ['<rootDir>/tests/jest-simple-reporter.js'],
-  moduleNameMapper: {
-    '^(\\.{1,2}/.*)\\.js$': '$1'
-  },
-  transform: {
-    '^.+\\.ts$': ['ts-jest', {
-      useESM: true
-    }]
-  },
-  transformIgnorePatterns: [
-    'node_modules/(?!(chalk|@modelcontextprotocol|af-.*)/)'
-  ],
-  extensionsToTreatAsEsm: ['.ts'],
-  forceExit: true,
-  detectOpenHandles: true,
-  testTimeout: 10000
-};
+export default {
+  preset: 'ts-jest',
+  testEnvironment: 'node',
+  testMatch: ['**/tests/**/*.test.ts', '**/tests/**/*.spec.ts'],
+  collectCoverageFrom: ['src/**/*.ts', '!src/**/*.d.ts', '!src/index.ts'],
+  coverageDirectory: 'coverage',
+  coverageReporters: ['text', 'lcov'],
+  verbose: false,
+  silent: true,
+  reporters: ['<rootDir>/tests/jest-simple-reporter.js'],
+  moduleNameMapper: {
+    '^(\\.{1,2}/.*)\\.js$': '$1',
+  },
+  transform: {
+    '^.+\\.ts$': [
+      'ts-jest',
+      {
+        useESM: true,
+      },
+    ],
+  },
+  transformIgnorePatterns: ['node_modules/(?!(chalk|@modelcontextprotocol|af-.*)/)'],
+  extensionsToTreatAsEsm: ['.ts'],
+  forceExit: true,
+  detectOpenHandles: true,
+  testTimeout: 10000,
+};

package/cli-template/package.json

@@ -16,9 +16,13 @@
     "ci": "node --no-deprecation ./scripts/npm/run.js",
     "reinstall": "node --no-deprecation ./scripts/npm/run.js reinstall",
     "typecheck": "tsc --noEmit",
-    "lint": "eslint .",
-    "lint:fix": "eslint --fix .",
-    "lint-fix-build": "eslint --fix . && rimraf dist && tsc",
+    "lint": "oxlint .",
+    "lint:fix": "oxlint --fix .",
+    "format": "oxfmt --check .",
+    "format:fix": "oxfmt .",
+    "quality": "npm run lint && npm run format",
+    "quality:fix": "npm run lint:fix && npm run format:fix",
+    "lint-fix-build": "oxlint --fix . && oxfmt . && rimraf dist && tsc",
     "generate-token": "node node_modules/fa-mcp-sdk/dist/core/auth/token-generator/server.js",
     "dead:exports": "ts-prune",
     "dead:files": "knip",
@@ -50,15 +54,16 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "dotenv": "^17.4.1",
-    "fa-mcp-sdk": "^0.4.74"
+    "fa-mcp-sdk": "^0.4.77"
   },
   "devDependencies": {
     "@types/express": "^5.0.6",
     "@types/jest": "^30.0.0",
     "@types/node": "^25.5.2",
     "cross-env": "^10.1.0",
-    "eslint-config-at-26-2": "^26.4.9",
     "jest": "^30.3.0",
+    "oxfmt": "^0.48.0",
+    "oxlint": "^1.63.0",
     "rimraf": "^6.1.3",
     "ts-jest": "^29.4.9",
     "tsx": "^4.21.0",